Re: [glob2-devel] we got raped

[Kyle Lutze]

preliminary findings is that they managed to spam the heck out of the wiki and forums by using a phpmyadmin code injection exploit. Leo said before he went to bed he removed the file that allows for the exploit and reverted to yesterday's backup. We should be good to go now, although we'll find out for certain once Leo has time to look over everything. We should probably get around to bringing phpbb and mediawiki up to date too.

Kyle

On 12/27/10 10:52 PM, ProgVal wrote:

Hello,

I have installed a CAPTCHA extension to a MediaWiki, it works fine. I think you should do it.
PHPBB has itself a CAPTCHA (at least in its newest versions), you should enable it too.

Best regards,
ProgVal

Le 28 déc. 2010 03:20, "Leo Wandersleb" <address@hidden> a écrit :
> hi guys,
>
> seems spammers take counter measures personally. last night i deleted 15 user
> accounts and their spam. 6h later they stroke back taking over all accounts and
> basically rendering glob2 wiki and forum worthless.
> now i'm trying to revert to a backup but i'd like to save some traces and a db
> dump before.
>
> regards,
>
> leo wandersleb